I would recommend docker based graylog over local install for security and simplicity. I've been using <a href="https://github.com/joschi/docker-graylog-alpine" rel="nofollow">https://github.com/joschi/docker-graylog-alpine</a> for 2+ years in prod. Docker based setup also provides an easy mechanism to run the same setup in prod as well as test/ local to test upgrades or simply to have a local graylog for local dev of an app.